find-test-content

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The script fetches a query-index and then downloads and parses HTML pages from a user-specified host (e.g., live/preview domains like main--mysite--owner.aem.live or other arbitrary hosts) — i.e., it scrapes public site content which is untrusted and is read/interpreted as part of the workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 01:39 AM